Your company is participating in a Cyber Security Education Program.
This Alert Test Phishing Attack included the following social engineering techniques:
- Use of company full name in body of email to associate with your employer.
- Email name included your company domain (example: all@yourcompany.com)
- From email name includes <fake email> to appear as the "real" email used to distract you; this is associated with #1
- Subject to appear critical (example: Alert Notice Test)
- Action required (example: Confirm Receipt)
- Google Translate was used to generate bi-lingual content to look more official.
How to spot this was a phishing email:
- Was this an email you were expecting?
- Was this Alert Test System and test communicated to you by management?
- From email address ("real" at end; after <fake email>) is some random domain not associated with your company (example: @lang-fr-en.com is not associated with your company)
- The link provided references a domain not associated with your company (example: lang-fr-en.com) and is hidden behind text (example: Alert Test Received) requiring you to "hover" or sample the link; this type of email could be associated with this type of email given the bi-lingual content.
- This email was/may have been filtered and in your junk mail folder.